Skip to content
OpenAdvisories

Archive

6 September 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-75816 Public exploit

    Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. This is due to the pre_update_value function lacking any capability or ownership check, and ActionP…

  • Critical 10.0
    CVE-2026-86218 Exploited Public exploit Scanner template EPSS 15%

    pre-authentication remote code execution

    N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.

    KEV Sep 8, 2026